This EU/ EEA/ UK Privacy Notice supplements our She the Mighty Privacy Policy and applies solely to all Visitors (visitors, Members and Hosts) to our Services who reside in the EEA (”you”). We adopt this notice to comply with the General Data Protection Regulation (“GDPR”). “EEA” means the European Economic Area, United Kingdom and Switzerland.

The She the Mighty Privacy Policy details: 1) the information we collect and how we use it; 2) our sharing of your Personal Data and other information; 3) Your Personal Data Rights, and 4) your choices.

Purposes and Legal Bases for Our Using of Your Information

We do not sell your personal data – such as your name and contact information – to third parties to use for their own marketing purposes. She the Mighty uses the information we collect for our legitimate interests which include the following:

Provide our Services. To provide you the Service we offer, communicate with you about your use of She the Mighty, respond to your inquiries, provide troubleshooting, and for other customer service purposes.

Performance of a Contract. To fulfill an agreement between you and us, you and your Space Hosts, or you and a third-party offering services on She the Mighty.

Personalization. To personalize your experiences while using the She the Mighty Platform.

Analytics. To gather metrics to better understand how users access and use the She the Mighty Platform; to evaluate and improve the She the Mighty Platform, and to develop new products and services.

Comply with Law. To comply with legal obligations, as part of our general business operations, and for other business administration purposes.

Prevent Misuse. Where we believe necessary to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person or violations of our She the Mighty Terms of Use or this Privacy Policy.

Personal Data Collected

Purposes of Processing

Legal Bases of Processing (EU Users)

Membership and Profile Information

Your Content

Communication

Automatically Collected Information

- Provide our Services

- Personalization

- Analytics

- Comply with Law

- Prevent Misuse

- Our Legitimate Business Interests (e.g. to efficiently conduct our business, where necessary to establish, exercise or defend against legal claims, make the Service more user-friendly and secure)

- Where Necessary to the Performance of a Contract with you or between you and a Space Host on She the Mighty (upon your request, or as necessary to make the services available)

- Compliance with Law

- With your Consent

Integrated Service Providers

- Provide our Services

- Comply with Law

- Prevent Misuse

- Our Legitimate Business Interests e.g., in providing a user-friendly Service with value-added features

- With your Consent

- Where Necessary to the Performance of a Contract with you or between you and a third-party (upon your request, or as necessary to make the services available)

- Compliance with Law

Automatically Collected Information

- Provide our Services

- Personalization

- Analytics

- Prevent Misuse

- Our Legitimate Business Interests (e.g. to efficiently conduct our business, where necessary to establish, exercise or defend against legal claims, make the Service more user-friendly and secure)

- Where Necessary to the Performance of a Contract with you or between you and a Space Host on She the Mighty (upon your request, or as necessary to make the services available)

- With your Consent

Engagement

- Personalization

- Analytics

- Our Legitimate Business Interests in providing a user-friendly Service and where necessary to establish, exercise or defend against legal claims

- With your Consent

Transferring Your Data

She the Mighty is headquartered in Canada, and has operations, entities and service providers in Canada, the United States and throughout the world. As such, we and our service providers may transfer your personal information to, or access it in, jurisdictions (including Canada and the United States) that may not provide equivalent levels of data protection as your home jurisdiction. We will take steps to ensure that your personal information receives an adequate level of protection in the jurisdictions in which we process it, including through: putting in place appropriate written data processing terms and/or data transfer agreements, using the standard contractual clauses as approved by the European Commission June 4, 2021, or following an adequacy decision by the EU Commission.

Complaints

Please send any complaints to support@shethemighty.com

Although we hope to have the opportunity to resolve any concerns you have directly, you may also make a privacy or data use complaint about us to the Data Protection Authority in the UK or EU/EEA Member State where you live or work by visiting the Office of the Data Protection Commissioner list of Data Protection Authorities at https://www.dataprotection.ie/en/individuals.